CVE-2023-2744
HIGHWP ERP < 1.12.4 - Authenticated SQL Injection via ERP Accounting People Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-2744. PoCs published by pashayogi.
AI-analyzed exploit summary This repository contains a functional Python script that demonstrates a time-based blind SQL injection vulnerability in WP ERP's Accounting module via the 'type' parameter in the '/wp-json/erp/v1/accounting/v1/people' endpoint. The PoC measures response time to confirm vulnerability.
Description
The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
Exploits (1)
This repository contains a functional Python script that demonstrates a time-based blind SQL injection vulnerability in WP ERP's Accounting module via the 'type' parameter in the '/wp-json/erp/v1/accounting/v1/people' endpoint. The PoC measures response time to confirm vulnerability.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H